nodejs-npm.yml

name: Black Duck Automatic FixPR
                                                                                                                                                                                                                                          
on:
  push:
    branches: [ main ]
                                                                                                                                                                                                                                          
jobs:
  blackduck-fixpr:
    runs-on: ubuntu-latest
                                                                                                                                                                                                                                          
    steps:
    - uses: actions/checkout@v4
                                                                                                                                                                                                                                          
    - name: Use Node.js
      uses: actions/setup-node@v3
      with:
        node-version: '18'
                                                                                                                                                                                                                                          
    - name: Install dependencies
      run: |
        cd nodejs-npm
        npm install
                                                                                                                                                                                                                                          
    - name: Black Duck Scan and FixPR
      uses: blackduck-inc/black-duck-security-scan@v2
      with:
        blackducksca_url: ${{ vars.BLACKDUCKSCA_URL }}
        blackducksca_token: ${{ secrets.BLACKDUCKSCA_TOKEN }}
        blackducksca_fixpr_enabled: true
        github_token: ${{ secrets.GH_TOKEN }}
      env:
        DETECT_PROJECT_NAME: ${{ github.event.repository.name }}